diff --git a/hetzner-vpn1.nix b/hetzner-vpn1.nix
index f6c355e..6da1829 100644
--- a/hetzner-vpn1.nix
+++ b/hetzner-vpn1.nix
@@ -60,12 +60,12 @@ in {
       recommendedOptimisation = true;
 
       virtualHosts = {
-        "preon-app.${servicesDomain}" = mkServiceConfig lpt2 8541;
-        "preon-api.${servicesDomain}" = mkServiceConfig lpt2 8542;
         "vscode.${servicesDomain}" = lib.mkMerge [
-          (mkServiceConfig lpt2 8543)
+          (mkServiceConfig lpt2 8542)
           {locations."/" .proxyWebsockets = true;}
         ];
+        "preon-app.${servicesDomain}" = mkServiceConfig lpt2 8543;
+        "preon-api.${servicesDomain}" = mkServiceConfig lpt2 8544;
       };
     };
 
diff --git a/vinzenz-lpt2.nix b/vinzenz-lpt2.nix
index 9e5ec12..4cb89df 100644
--- a/vinzenz-lpt2.nix
+++ b/vinzenz-lpt2.nix
@@ -54,7 +54,7 @@
 
     networking.firewall = {
       checkReversePath = "loose";
-      allowedTCPPorts = [8542];
+      allowedTCPPorts = [8542 8543 8544];
     };
   };
 }